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IN THE CLAIMS; 



1 1-15. (Cancelled) 

1 16. (Original) A file encryption apparatus that encrypts a plaintext to generate a 

2 ciphertext and stores the ciphertext into a memory unit thereof, the file management apparatus 

3 comprising: 

4 a key storage medium storing key information beforehand; 

5 registration means for receiving an input of a password, encrypts the key 

6 information using the received password to generate an encrypted key, and writes the generated 

7 encrypted key to the memory unit; and 

8 encryption unit means for encrypting a plaintext using a file key to generate a 

9 ciphertext, encrypting the file key using the key information to generate an encrypted file key, 
10 and writing the ciphertext in association with the encrypted file key, to the memory unit. 

1 17. (Original) A file decryption apparatus that stores the ciphertext and the encrypted 

2 file key generated by the file encryption apparatus of Claim 16, in association with each other, in 

3 a memory unit thereof, and decrypts the ciphertext, the file decryption apparatus comprising: 

4 a key storage medium storing key information beforehand; 

5 switch means 

6 (a) including first key obtaining means for receiving an input of a password 

7 and decrypting the encrypted key using the received password to generate key information, and 

8 second key obtaining means for reading the key information from the key storage medium, and 

9 (b) obtaining the key information by one of the first key obtaining means and 
10 the second key obtaining means; and 
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11 decryption means for decrypting the encrypted file key using the obtained key 

12 information to generate a file key, and decrypts the ciphertext using the file key to generate a 

13 decrypted text. 

1 18-37. (Cancelled) 

Please add the newly drafted Claims 38-43. 

1 38. (New) A file encryption apparatus that encrypts a plaintext to generate a 

2 ciphertext and stores the ciphertext into a memory unit thereof, the file management apparatus 

3 comprising: 

4 a key storage medium storing key information beforehand; 

5 registration unit for receiving an input of a password, encrypts the key 

6 information using the received password to generate an encrypted key, and writes the generated 

7 encrypted key to the memory unit; and 

8 encryption unit for encrypting a plaintext using a file key to generate a ciphertext, 

9 encrypting the file key using the key information to generate an encrypted file key, and writing 
10 the ciphertext in association with the encrypted file key, to the memory unit. 
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1 39. (New) A file decryption apparatus that stores the ciphertext and the encrypted file 

2 key generated by the file encryption apparatus of Claim 38, in association with each other, in a 

3 memory unit thereof, and decrypts the ciphertext, the file decryption apparatus comprising: 

4 a key storage medium storing key information beforehand; 

5 switch unit 

6 (a) including a first key obtaining unit for receiving an input of a password 

7 and decrypting the encrypted key using the received password to generate key information, and a 

8 second key obtaining unit for reading the key information from the key storage medium, and 

9 (b) obtaining the key information by one of the first key obtaining unit and the 

10 second key obtaining unit; and 

1 1 a decryption unit for decrypting the encrypted file key using the obtained key 

12 information to generate a file key, and decrypts the ciphertext using the file key to generate a 

13 decrypted text. 

1 40. (New) The file decryption apparatus of Claim 39, 

2 wherein the registration unit further receives an input of a user identifier that 

3 identifies a user, and writes the user identifier in association with the encrypted key, to the 

4 memory unit, and 

5 the first key obtaining unit further receives an input of the user identifier and 

6 decrypts the encrypted key that is associated with the user identifier. 
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1 41. (New) The file decryption apparatus of Claim 3 9, 

2 wherein the registration unit further writes the key information and/or 

3 authentication information in association with the encrypted key, to the memory unit, 

4 the encryption unit further writes the encrypted key, the key information, and/or 

5 authentication information in association with the ciphertext, to the memory unit, 

6 the first key obtaining means checks, using the authentication information, 

7 whether the encrypted key has been altered or not, when the encrypted key that is associated with 

8 the authentication information is decrypted, and 

9 the decryption unit checks, using the authentication information, whether the 

10 ciphertext has been altered or not, when the ciphertext that is associated with the authentication 

1 1 information is decrypted. 

12 42. (New) The file decryption apparatus of Claim 34, 

13 wherein the registration unit writes the encrypted key to the memory unit that is a 

14 portable storage medium, and 

15 the first key obtaining unit decrypts the encrypted key that has been written to the 

1 6 memory unit that is the portable storage medium. 

17 43. (New) The file management apparatus of Claim 38, further comprising 

18 a deletion unit for deleting the encrypted key that has been written to the memory 

19 unit, 

20 wherein the registration unit further receives an input of a new password, encrypts 

21 the key information using the new password to generate a new encrypted key, and writes the 

22 generated new encrypted key to the memory unit. 
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